iptables is like alchemy

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



This is really related to iptables, not I presume Fedora-specific. But I'm really hoping that somebody here will be able to school me on iptables, so I don't have to find and subscribe to some other list just to ask one question.

I'm faced with the problem of needing to punch a hole in a firewall on our portal server so that, in our case, ssh to port 20022 on external interface of that server actually just connects to port 22 on another machine located in the network on the internal interface. I hope I'm being clear.

I've tried many iterations of iptables rules to accomplish this. The closest I've come is:

iptables -A PREROUTING -t nat -p tcp -s 0/0 --dport 20022 -j DNAT --to 192.168.0.35:22

And indeed connecting to port 20022 on portal just goes straight to port 22 on the other (192.168.0.35) machine. The problem is, as soon as I apply this rule, DNS queries (portal is also a DNS server) to the external interface stop working.

I've googled endlessly and found about a thousand variations by people that are each supposed to solve a subtly different variation on what I'm trying to do. Nothing I've tried does what I want without bad side effects like I describe above.

-Alan
-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux